@cotal-ai/connector-claude-code 0.4.0 → 0.6.0

package/dist/hook.cjs

@@ -3504,16 +3504,16 @@ var require_errors = __commonJS({
       }
     };
     exports2.ProtocolError = ProtocolError;
-    var RequestError = class extends Error {
+    var RequestError2 = class extends Error {
       constructor(message = "", options) {
         super(message, options);
         this.name = "RequestError";
       }
       isNoResponders() {
-        return this.cause instanceof NoRespondersError;
+        return this.cause instanceof NoRespondersError2;
       }
     };
-    exports2.RequestError = RequestError;
+    exports2.RequestError = RequestError2;
     var TimeoutError = class extends Error {
       constructor(options) {
         super("timeout", options);
@@ -3521,7 +3521,7 @@ var require_errors = __commonJS({
       }
     };
     exports2.TimeoutError = TimeoutError;
-    var NoRespondersError = class extends Error {
+    var NoRespondersError2 = class extends Error {
       subject;
       constructor(subject, options) {
         super(`no responders: '${subject}'`, options);
@@ -3529,7 +3529,7 @@ var require_errors = __commonJS({
         this.name = "NoResponders";
       }
     };
-    exports2.NoRespondersError = NoRespondersError;
+    exports2.NoRespondersError = NoRespondersError2;
     var PermissionViolationError2 = class _PermissionViolationError extends Error {
       operation;
       subject;
@@ -3572,10 +3572,10 @@ var require_errors = __commonJS({
       InvalidArgumentError,
       InvalidOperationError,
       InvalidSubjectError,
-      NoRespondersError,
+      NoRespondersError: NoRespondersError2,
       PermissionViolationError: PermissionViolationError2,
       ProtocolError,
-      RequestError,
+      RequestError: RequestError2,
       TimeoutError,
       UserAuthenticationExpiredError: UserAuthenticationExpiredError2
     };
@@ -6421,7 +6421,7 @@ var require_authenticator = __commonJS({
     exports2.tokenAuthenticator = tokenAuthenticator;
     exports2.nkeyAuthenticator = nkeyAuthenticator;
     exports2.jwtAuthenticator = jwtAuthenticator;
-    exports2.credsAuthenticator = credsAuthenticator5;
+    exports2.credsAuthenticator = credsAuthenticator6;
     var nkeys_1 = require_nkeys2();
     var encoders_1 = require_encoders();
     function multiAuthenticator(authenticators) {
@@ -6471,7 +6471,7 @@ var require_authenticator = __commonJS({
         return { jwt, nkey, sig };
       };
     }
-    function credsAuthenticator5(creds) {
+    function credsAuthenticator6(creds) {
       const fn = typeof creds !== "function" ? () => creds : creds;
       const parse = () => {
         const CREDS = /\s*(?:(?:[-]{3,}[^\n]*[-]{3,}\n)(.+)(?:\n\s*[-]{3,}[^\n]*[-]{3,}\n))/ig;
@@ -13601,11 +13601,11 @@ var require_connect = __commonJS({
   "../../node_modules/.pnpm/@nats-io+transport-node@3.4.0/node_modules/@nats-io/transport-node/lib/connect.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.connect = connect6;
+    exports2.connect = connect7;
     var node_transport_1 = require_node_transport();
     var nats_base_client_1 = require_nats_base_client();
     var nats_base_client_2 = require_nats_base_client();
-    function connect6(opts = {}) {
+    function connect7(opts = {}) {
       if ((0, nats_base_client_2.hasWsProtocol)(opts)) {
         return Promise.reject(nats_base_client_2.errors.InvalidArgumentError.format(`servers`, `node client doesn't support websockets, use the 'wsconnect' function instead`));
       }
@@ -13797,7 +13797,7 @@ var require_kv = __commonJS({
         throw new Error(`invalid bucket name: ${name}`);
       }
     }
-    var Kvm5 = class {
+    var Kvm8 = class {
       js;
       /**
        * Creates an instance of the Kv that allows you to create and access KV stores.
@@ -13863,7 +13863,7 @@ var require_kv = __commonJS({
         return new internal_2.ListerImpl(subj, filter, this.js);
       }
     };
-    exports2.Kvm = Kvm5;
+    exports2.Kvm = Kvm8;
     var Bucket = class _Bucket {
       js;
       jsm;
@@ -14709,6 +14709,9 @@ var import_node_os = require("node:os");
 var import_node_fs2 = require("node:fs");
 
 // ../../packages/core/dist/subjects.js
+function isConcreteChannel(channel) {
+  return !channel.split(".").some((s) => s.trim() === "*" || s.trim() === ">");
+}
 function subjectMatches(pattern, subject) {
   const p = pattern.split(".");
   const s = subject.split(".");
@@ -16411,11 +16414,22 @@ var SYS_LIMITS = { ...BASE_LIMITS, mem_storage: 0, disk_storage: 0 };
 var import_jetstream = __toESM(require_mod4(), 1);
 var import_transport_node = __toESM(require_transport_node(), 1);
 var import_kv = __toESM(require_mod6(), 1);
+var PLANE3_DEDUP_WINDOW_MS = 2 * 60 * 60 * 1e3;
 
 // ../../packages/core/dist/channels.js
 var import_kv2 = __toESM(require_mod6(), 1);
 var import_transport_node2 = __toESM(require_transport_node(), 1);
 
+// ../../packages/core/dist/members.js
+var import_kv3 = __toESM(require_mod6(), 1);
+
+// ../../packages/core/dist/acls.js
+var import_kv4 = __toESM(require_mod6(), 1);
+
+// ../../packages/core/dist/lease.js
+var import_kv5 = __toESM(require_mod6(), 1);
+var import_transport_node3 = __toESM(require_transport_node(), 1);
+
 // ../../packages/core/dist/agent-file.js
 var import_node_fs = require("node:fs");
 function unquote(v) {
@@ -16476,6 +16490,8 @@ function loadAgentFile(path) {
   const subscribe = list("subscribe");
   const allowSubscribe = list("allowSubscribe");
   const allowPublish = list("allowPublish");
+  const quiet = list("quiet");
+  const muted = list("muted");
   for (const ch of [...subscribe ?? [], ...allowSubscribe ?? [], ...allowPublish ?? []])
     try {
       assertValidChannel(ch);
@@ -16487,7 +16503,22 @@ function loadAgentFile(path) {
   for (const ch of effSubscribe)
     if (!channelInAllow(effAllow, ch))
       throw new Error(`agent file ${path}: subscribe channel "${ch}" is not within allowSubscribe [${effAllow.join(", ")}]`);
-  const known = /* @__PURE__ */ new Set(["name", "role", "kind", "description", "tags", "subscribe", "allowSubscribe", "allowPublish", "model", "capabilities", "owner"]);
+  const both = (quiet ?? []).filter((c) => (muted ?? []).includes(c));
+  if (both.length)
+    throw new Error(`agent file ${path}: channel(s) [${both.join(", ")}] are in both quiet and muted \u2014 pick one`);
+  for (const [field, chans] of [["quiet", quiet], ["muted", muted]])
+    for (const ch of chans ?? []) {
+      try {
+        assertValidChannel(ch);
+      } catch (e) {
+        throw new Error(`agent file ${path}: ${e.message}`);
+      }
+      if (!isConcreteChannel(ch))
+        throw new Error(`agent file ${path}: ${field} channel "${ch}" must be a concrete channel (no wildcard)`);
+      if (!channelInAllow(effAllow, ch))
+        throw new Error(`agent file ${path}: ${field} channel "${ch}" is not within your read ACL / allowSubscribe [${effAllow.join(", ")}]`);
+    }
+  const known = /* @__PURE__ */ new Set(["name", "role", "kind", "description", "tags", "subscribe", "allowSubscribe", "allowPublish", "quiet", "muted", "model", "capabilities", "owner"]);
   const meta = {};
   for (const [k, v] of Object.entries(fm))
     if (!known.has(k) && typeof v === "string")
@@ -16501,6 +16532,8 @@ function loadAgentFile(path) {
     subscribe,
     allowSubscribe,
     allowPublish,
+    quiet,
+    muted,
     model: str("model"),
     capabilities: list("capabilities"),
     owner: str("owner"),
@@ -16510,15 +16543,15 @@ function loadAgentFile(path) {
 }
 
 // ../../packages/core/dist/endpoint.js
-var import_transport_node3 = __toESM(require_transport_node(), 1);
+var import_transport_node4 = __toESM(require_transport_node(), 1);
 var import_jetstream2 = __toESM(require_mod4(), 1);
-var import_kv3 = __toESM(require_mod6(), 1);
+var import_kv6 = __toESM(require_mod6(), 1);
 var DEFAULT_SERVER = "nats://127.0.0.1:4222";
 
 // ../../packages/core/dist/spaces.js
-var import_transport_node4 = __toESM(require_transport_node(), 1);
+var import_transport_node5 = __toESM(require_transport_node(), 1);
 var import_jetstream3 = __toESM(require_mod4(), 1);
-var import_kv4 = __toESM(require_mod6(), 1);
+var import_kv7 = __toESM(require_mod6(), 1);
 
 // ../../packages/core/dist/registry.js
 var Registry = class {
@@ -16572,6 +16605,20 @@ function configFromEnv(env = process.env) {
   const resolvedAllowPub = allowPub.length ? allowPub : def?.allowPublish ?? [];
   for (const ch of [...resolvedSubscribe, ...resolvedAllowSub, ...resolvedAllowPub])
     assertValidChannel(ch);
+  const qEnv = splitList(env.COTAL_QUIET), mEnv = splitList(env.COTAL_MUTED);
+  const resolvedQuiet = qEnv.length ? qEnv : def?.quiet ?? [];
+  const resolvedMuted = mEnv.length ? mEnv : def?.muted ?? [];
+  const bothModes = resolvedQuiet.filter((c) => resolvedMuted.includes(c));
+  if (bothModes.length)
+    throw new Error(`COTAL config: channel(s) [${bothModes.join(", ")}] are in both quiet and muted`);
+  for (const [field, chans] of [["quiet", resolvedQuiet], ["muted", resolvedMuted]])
+    for (const ch of chans) {
+      assertValidChannel(ch);
+      if (!isConcreteChannel(ch))
+        throw new Error(`COTAL config: ${field} channel "${ch}" must be concrete (no wildcard)`);
+      if (!channelInAllow(resolvedAllowSub, ch))
+        throw new Error(`COTAL config: ${field} channel "${ch}" is not within allowSubscribe [${resolvedAllowSub.join(", ")}]`);
+    }
   const credsPath = env.COTAL_CREDS?.trim();
   return {
     space: env.COTAL_SPACE?.trim() || link?.space || "demo",
@@ -16581,12 +16628,17 @@ function configFromEnv(env = process.env) {
     role: env.COTAL_ROLE?.trim() || def?.role || void 0,
     description: def?.description,
     tags: def?.tags,
+    meta: def?.meta,
+    capabilities: def?.capabilities,
+    model: env.COTAL_MODEL?.trim() || def?.model || void 0,
     servers: env.COTAL_SERVERS?.trim() || link?.servers || DEFAULT_SERVER,
     subscribe: resolvedSubscribe,
     allowSubscribe: resolvedAllowSub,
     // Post ACL is default-DENY: only what's explicitly declared (env > agent-file). The broker
     // enforces it under auth; in open mode posting is unrestricted regardless (see laneLine).
     allowPublish: resolvedAllowPub,
+    quiet: resolvedQuiet,
+    muted: resolvedMuted,
     kind: env.COTAL_KIND?.trim() || def?.kind || "agent",
     token: env.COTAL_TOKEN?.trim() || link?.token,
     user: link?.user,